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•• The MAILING DATE of this communication appears on the cover sheet with the correspondence address •• 
Period for Reply 



A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1.136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If the period for reply specified above is less than thirty (30) days, a reply within the statutory minimum of thirty (30) days will be considered timely. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1 )M Responsive to communication(s) filed on 30 September 2004 . 
2a)D This action is FINAL. 2b)l3 This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G. 213. 

Disposition of Claims 

4) I3 Claim(s) 1-16 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) |3 Claim(s) 5.7-10.15 and 16 is/are allowed. 

6) |3 Claim(s) 1-4 and 11-14 is/are rejected. 

7) [x] Claim(s) 6 is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10) D The drawing(s) filed on is/are: a)D accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1.85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 

11) D The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

12) D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119(a)-(d) or (f). 
a)D All b)D Some * c)D None of: 

1 .□ Certified copies of the priority documents have been received. 

2. D Certified copies of the priority documents have been received in Application No. . 

3. D Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 
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DETAILED ACTION 

1 . Claims 1-16 remain in the application. Applicant has amended claims 5, 7 and added 
claims 15-16. 

Allowable Subject Matter 

2. Claims 5, 7-10, and 15-16 allowed. 

3. Claim 6 would be allowable if rewritten to overcome the rejection(s) under 35 

U.S.C. 1 12, 2nd paragraph, set'forth in this Office action and to include all of the limitations of 
the base claim and any intervening claims. 

Claim Rejections - 35 USC § 103 

4. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 

obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

5. Claims 1-2, 12 and 14 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Deianov et al. (U.S. 6,529,985 Bl) in view of Hammond (U.S. 6,463,583 Bl). 

6. As to claim 1, Deianov teaches loading the interception module to occupy a location in a 
memory (the present invention dynamically loads an interception module 1 1 1 into the operating 
system kernel 109; col. 5, line 66 - col. 6, line 1), redirecting the one or more API calls by 
creating an alias to any page containing an entry point for an API call to be intercepted and to 
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write the address of the interception module to the alias (Pointers 1 14 to system calls 1 15 are 
located in an operating system interrupt vector table 113 ... to the interception module 1 1 1 to 
execute the interception module 111; col. 6, lines 5-38), providing to any instances of the 
interception module the original entry points for the one or more API calls (the present invention 
makes a copy 1 16 of a pointer 1 14 to each system call 1 15 to be intercepted; col. 6, lines 16-17, 
the interception module 1 1 1 utilizes the saved copy of the pointer 1 16 to make the system call 
1 15 for the process; col. 8, lines 21-23), and the interception module being adapted to selectively 
provide modified functionality for the intercepted API calls (When a call is made ... not all 
system calls need be intercepted; col. 6, lines 35-40, and alternative object code to be executed 
instead of the system call . . . system call wrapper; col. 1, line 64 - col. 2, line 2). 

7. However, Deianov does not teach the activation module being adapted to carry out the 
loading to a location in a shared region of virtual memory as long as interception of the API calls 
is required, redirecting, and providing steps. Deianov uses the term "the present invention" that 
carries out all the above steps except for a location in a shared region of virtual memory as long 
as interception of the API calls is required. Hammond teaches an activation module (injection 
application) being adapted to load the interception module (injection dynamic link library) to 
occupy a location in a shared region of virtual memory as long as interception of the API calls is 
required (An injection DLL called INJECT.DLL is loaded from the injection application into a 
second pre-determined memory location within an area of shared memory; col. 8, lines 36-67, 
process's virtual address space; col. 7, line 58, and the injection DLL is loaded ...Win32 
processes; col. 8, lines 56-63). 
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8. It would have been obvious to one of ordinary skill in the art at the time the invention 
was made to combine the teaching of Deianov and Hammond because Hammond teaching of 
loading the interception module would improve the flexibility of Deianov' s system by 
dynamically injecting the execution logic into a shared memory space of a window operating 
system (col. 2, lines 56-58) 

9. As to claim 2, Deianov does not explicitly teach the activation module is adapted to load 
the interception module at system initialization time. Hammond teaches the activation is adapted 
to load the interception module at system initialization time (an injection application is started 
with a kernel application ... for the windowed operating system; col. 5, lines 46-58). 

10. As to claim 12, Deianov does not explicitly teach one or more API calls to be intercepted 
is a call for allocating memory, however, Deianov teaches a system call performs some system 
operations, such as the access of a system hardware or software (col. 1, lines 31-44). It would 
have been obvious the call for allocating memory could also be intercepted, 

11. As to claim 14, Deianov teaches computer program code stored on a computer readable 
storage medium for intercepting API calls when executed on a virtual memory computer system, 
the program code comprising the system of claim 1 (A computer memory 101 ... into the 
operating system 1 17; col. 5, lines 50-66). 
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12. Claims 3-4 and 1 1 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Deianov et al. (U.S. 6,529,985 Bl) in view of Hammond (U.S. 6,463,583 Bl) further in view of 
Pietrek (Learn System-Level Win32 Coding Techniques by Writing an API Spy Program). 

13. As to claim 3, Deianov does not teach the activation module is adapted to read a 
configuration file, the configuration file containing data defining the API calls to be intercepted 
and the manner in which the API calls are to be modified, the activation module being adapted to 
write the configuration data to an area of shared memory and to provides to all instances of the ^ 
interception module the location of the shared memory. Pietrek teaches the activation module is 
adapted to read a configuration file, the configuration file containing data defining the API calls 
to be intercepted (the spy DLL reads an input file ... about the function's parameters; page 8), 
the activation module being adapted to write the configuration data to an area of memory (the 
code portion of the stub ... on the stack; page 8), and to provides to all instances of the 
interception module the location of the shared memory (As the spy DLL builds each stub ... the 
import section; page 9). 

14. It would have been obvious to one of ordinary skill in the art at the time the invention 
was made to combine the teaching of Pietrek and Deianov because Pietrek teaches a method to 
monitor multiple applications by creating an extensible list of functions to be intercepted and no 
modification to the programs (page 1). 
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15. As to claim 4, Deianov does not teach an instance of the interception module is 
responsive to receiving a redirected API call to load itself within the process making the API call 
so that a segment of global data is made available to each instance of the interception module. 

16. Pietrek teaches an instance of the interception module is responsive to receiving a 
redirected API call to load itself within the process making the API call so that a segment of 
global data is made available to each instance of the interception module (By freezing the target 
process ... code for the program; pages 5-6). 

17. It would have been obvious to one of ordinary skill in the art at the time the invention 
was made to combine the teaching of Deianov and Pietrek because Pietrek teaches sharing data 
to multiple instances of the interception module would improve the performance by reducing the 
memory usage. 

18. As to claim 11, Deianov does not teach the interception module is adapted to check that 
it is not being called recursively prior to loading itself However, Deianov teaches recursively 
execute the wrapper is avoided by check on the flag (col. 7, lines 29-40 and col. 8, lines 44-55). 
It would have been obvious to one of ordinary skill in the art to include checking of recursively 
called the Deianov' s system because it provides a method not to load multiple instance of the 
same code into the process address space. 
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19. Claims 13 is rejected under 35 U.S.C 103(a) as being unpatentable over Deianov et al. 
(U.S. 6,529,985 Bl) in view of Hammond (U.S. 6,463,583 Bl) further in view of Admitted Prior 
Art (APA). 

20. As to claim 13, Deianov does not teach the activation module and the interception 
modules are adapted to operate on OS/2 Warp Version 3 SMP and Warp Version 4.5 operating 
systems. Deianov teaches the activation module and the interception modules are adapted to 
operate on the multitasking system (col. 1, lines 8-11). APA teaches OS/2 Wrap Version 3 SMP 
and Warp Version 4.5 operating system for used by 32-bit applications (page 2, lines 18-25). It 
would have been obvious to apply the teaching of APA to the system of Deianov because it 
provides a method to run the application in different operating systems. 

Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Diem K Cao whose telephone number is (571) 272-3760. The 
examiner can normally be reached on Monday - Thursday, 9:00AM - 5:00PM. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Meng-Ai An can be reached on (571) 272-3756. The fax phone number for the 
organization where this application or proceeding is assigned is 703-872-9306. 
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Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 

Any response to this action should be mailed to: 

Commissioner for Patents 
PO Box 1450 



Alexandria, VA 223 13-1450 



Diem Cao 



MENTAL T. AN 
SUPERVISORY PATENT EXAMINER 
TECHNOLOGY CENTER 2100 




